Delegated Authentication Token Retrieval for Mobile Apps
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems require each application on a device to individually request OAuth tokens from an authorization server, leading to bandwidth and processor usage inefficiencies and limiting enterprise control over user access to applications.
Innovation Solution
A method where a single authorization client on a device sends a request for multiple application tokens to a client authorization module, receiving tokens that are then distributed to each application for authentication with their respective application servers, thereby streamlining the authentication process and enhancing enterprise control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If each application requests tokens individually from the authorization server, then each application can be authenticated, but bandwidth and processor usage increase significantly
Solution Approach 1:
The patent merges multiple individual token requests into a single bulk request. The authorization client consolidates authentication requests for multiple applications and sends them together to the authorization server in one operation, rather than having each application send separate requests. This combining approach maintains authentication reliability while significantly reducing bandwidth consumption and processor usage.
2Reliability
If each application requests tokens individually, then authentication can be performed, but usability burden increases for the user
Solution Approach 1:
The system combines multiple authentication operations into a single user interaction. Instead of requiring the user to authenticate separately for each application, the authorization client performs bulk authentication for all applications in one step, greatly improving ease of operation while maintaining secure authentication capability.
3Reliability
If individual applications request tokens, then authentication is performed, but enterprise control over user access is reduced
Solution Approach 1:
The authorization client serves as an intermediary between applications and the authorization server. It consolidates authentication requests and manages token distribution centrally, enabling the enterprise to maintain policy control over user access to multiple applications. The intermediary approach allows the enterprise to enforce authentication policies uniformly across all applications while maintaining the ability to control and monitor access.
Data Source
AI summary
In some embodiments, a non-transitory processor-readable medium includes code to cause a processor to send, from an authorization client on a device to a client authorization module, an indication of multiple applications installed on the device, and receive, at the authorization client and in response to the indication, multiple application tokens from the client authorization module. Each individual application token from the multiple application tokens received by the authorization client is uniquely associated with an application from the multiple applications installed on the device. The authorization client provides each application its associated application token such that each application from the multiple applications can use that application token in order to be authenticated to an application server associated with the application.